Vulnerability in Microsoft Windows Xp

CVE-2009-1808

Microsoft Windows XP SP3 allows local users to cause a denial of service (system crash) by making an SPI_SETDESKWALLPAPER SystemParametersInfo call with an improperly terminated pvParam argument, followed by an SPI_GETDESKWALLPAPER SystemParametersInfo call.

EPSS: 0.028 (85.1th percentile) — read the EPSS interpretation.

Affected products

References